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1.  Introduction 


Wireless  deviees  are  ubiquitous.  Forensie  eharaeterization  of  a  wireless  deviee  is  useful  in  many 
applieations.  An  example  of  this  is  in  the  testing  of  Federal  Communieations  Commission  (FCC) 
Part  15  deviees  (7).  These  deviees  must  adhere  to  striet  guidelines  with  regard  to  RF 
interferenee;  one  reason  being  problems  with  Portable  Eleetronie  Deviees  (PEDs)  earried  on 
board  aireraft.  Title  14  of  the  Code  of  Federal  Regulations  (14  CFR)  §§  91.21,  121.306,  125.204, 
and  135.144  limits  the  operation  of  PEDs  aboard  U.S. -registered  eivil  aireraft.  These  rules  also 
permit  the  use  of  speeifie  PEDs  after  the  aireraft  operator  has  determined  that  the  PED  will  not 
interfere  with  the  operations  of  the  aireraft  (2).  However,  how  ean  the  aireraft  operator  know 
whieh  PEDs  are  approved,  or  if  the  approved  deviees  are  being  operated  at  inappropriate  times 
(3)?  Complianee  ean  be  verified  by  deteeting  the  operation  of  transmitting  PEDs  (T-PEDs)  using 
an  onboard  monitoring  system  (4)  or  it  eould  be  verified  by  eharaeterizing  the  deviee  at  a  gate 
entry  point,  whether  powered  on  or  off,  using  speeially  designed  probe  signals  and  using  forensie 
teehniques  to  elassify  the  returned  signal.  In  a  more  general  setting,  forensie  eharaeterization 
allows  determination  of  the  type  of  deviee,  make,  model,  eonfiguration,  and  other  eharaeteristies 
based  on  observation  of  the  data  that  the  deviee  produees.  The  unique  eharaeteristies  of  the 
deviee  are  known  as  deviee  signatures  or  deviee  fingerprints. 

To  eharaeterize  an  RF  deviee,  the  deviee  is  exeited  using  a  speeially  designed  probe  signal.  The 
probe  signal  interaets  with  several  eireuit  eomponents,  eaeh  of  whieh  modifies  the  probe  signal, 
effeetively  embedding  information  into  the  signal.  The  embedded  information  is  unique  to  eaeh 
eireuit  eomponent.  The  modified  signal  is  then  transmitted  from  the  deviee  and  eaptured  by  a 
reeeiver.  Features,  or  key  eharaeteristies,  are  extraeted  from  the  reeeived  signal  and  formed  into 
a  feature  veetor.  The  feature  veetor  forms  the  deviee  signature  or  deviee  fingerprint  that  is  then 
eharaeterized  using  a  elassifieation  system.  A  bloek  diagram  of  the  general  system  is  shown  in 
figure  1. 


Figure  1 .  System  block  diagram. 

In  this  report,  we  enhanee  our  waveform  and  modeling  design  from  two  previous  experiments. 
Experiment  1  used  a  linear  ehirp  signal  multiplied  by  a  Gaussian  window  to  exeite  a  nonlinear 
system  model.  This  experiment  foeused  on  mathematieal  modeling  of  the  system  response  and 
elassifieation  methods  using  five  eombinations  of  filters  and  nonlinear  eomponents.  This  work 
was  based  on  thesis  work  by  Anthony  Martone  (5)  at  Purdue  University.  We  extend  this  researeh 
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by  developing  a  model  for  the  nonlinearity  based  on  a  diode  and  perform  a  eomprehensive 
analysis  of  all  possible  eombinations  (not  limited  to  five)  of  the  filter  and  nonlinearity  at  several 
different  noise  levels. 

Experiment  2  used  a  linear  ehirp  to  exeite  the  system  with  a  foeus  on  large  bandwidth  filter 
responses  without  the  presenee  of  a  nonlinearity.  This  experiment,  initially  eondueted  by  Purdue 
University  and  North  Carolina  State  University  (NCSU),  eneountered  several  hardware 
limitations  that  restrieted  the  bandwidth  of  the  probe  to  100  MHz.  To  overeome  this  limitation 
the  measured  refleeted  responses  were  mapped  to  a  larger  response  prior  to  feature  seleetion  and 
analysis.  For  this  experiment,  we  eapture  the  response  to  a  large  bandwidth  signal  for  analysis 
and  add  a  diode  to  aet  as  a  nonlinearity  in  the  system.  This  alleviates  the  need  for  mapping. 


2.  Probe  Signal  Design 


2.1  Linear  Chirp 

The  probe  signal p(t)  used  in  both  experiments  is  based  on  a  linear  ehirp.  Chirp  signals  are 
attraetive  beeause  they  allow  the  probe  signal  to  have  a  large  bandwidth  and  low  peak 
transmission  power.  The  frequeney  eontent  of  the  probe  may  then  generate  more  information  that 
ean  be  used  to  eharaeterize  the  eireuit.  This  type  of  ehirp  was  originally  ehosen  to  enable 
estimation  of  the  eenter  frequeney  of  the  exeited  filter  using  only  simple  time  domain  features,  as 
will  be  deseribed  in  the  following  seetions.  The  eharaeteristies  of  this  probe  are  appropriate  for 
the  deviee  model  employed  here,  whieh  foeuses  on  the  refleeted  response  of  a  linear  bandpass 
filter.  The  linear  ehirp  is  defined  as 

l{t)  =  Ccos{(j)) 

with  O  defined  as 

0(f)  =  27r/of  + 

where 

•  C  is  the  amplitude  of  the  signal 

•  t  is  the  time  variable 

•  fo  is  the  frequeney  at  t=0 

•  ^  is  the  ehirp  rate 
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The  instantaneous  frequeney  is  defined  as 


0(/)  =  27r/o  +  27rkt 
An  example  of  this  signal  is  shown  in  figure  2. 


(3) 


Figure  2.  Sample  linear  chirp  signal. 

2.2  Gaussian  Windowed  Chirp 

For  Experiment  1,  we  designed  a  probe  signal  that  is  windowed  by  a  Gaussian  funetion.  This  is 
done  by  multiplying  the  linear  ehirp  signal  by  a  Gaussian  window  funetion  in  the  time  domain. 
The  Gaussian  window  funetion  is  used  sinee  it  generates  a  wide  main  lobe  and  produees  rapidly 
deeaying  side  lobes  in  the  frequeney  domain  (6).  The  Gaussian  window  funetion  is  deseribed  in 
the  form  of  a  Gaussian  envelope: 


where 


... 

W[t)  =  e  2a2 


oo 


—  oc 


(4) 


(5) 


3 


and 


a 


2 


CXD 

y  (f  —  fi)^iv{t)dt  >  0 

—  OO 


(6) 


The  windowed  linear  ehirp,  whieh  we  refer  to  as  the  Gaussian  windowed  ehirp,  is  then  formed 
x(t)  =  w(t)l(t).  Thus,  x(t)  is 


x{t)  = 


2cr2 


(7) 


An  example  of  x(t)  (real  part)  is  shown  in  figure  3.  The  parameters  used  to  generate  this  signal 
are  shown  in  table  1 . 


Figure  3.  Sample  time  domain  Gaussian  chirp. 
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Table  1.  Parameters  used  for  Gaussian  chirp. 


Parameter 

Description 

Value 

Cl 

Amplitude  of  signal 

1 

i 

Imaginary  number 

fo 

Initial  frequency  at  t  =  0 

400MHz 

h 

Final  frequency  at  time  ti 

450MHz 

h 

Final  time 

0.1x10-® 

k 

Chirp  rate 

SxlOi-^ 

k 

Mean 

5x10-® 

(7 

Standard  deviation 

1x10-® 

3.  Experiment  1 


This  experiment  studies  refleeted  signals  resulting  from  a  Gaussian  windowed  ehirp  exeiting  a 
eombination  of  filter  and  nonlinearity  models  with  noise  added.  Features  were  extraeted  from  the 
refleeted  signals  and  then  were  elassified  using  a  set  of  known  elassifiers  to  eompare  the  results. 
A  bloek  diagram  of  this  system  is  shown  in  figure  4.  The  nonlinearity  used  in  this  system  is 
modeled  after  a  M=3  order  Taylor-series,  the  noise  is  Additive  White  Gaussian  Noise  (AWGN) 
at  speeifie  power  levels,  and  the  filters  are  2^^  and  4^^  order  Chebyshev  bandpass  filters. 


Figure  4.  Circuit  model  for  Experiment  1. 

Five  eireuit  models  were  used  in  this  experiment.  Eaeh  eireuit  model  was  exeited  with  a 
Gaussian  windowed  ehirp  generated  with  the  parameters  found  in  table  2.  Eaeh  nonlinearity 
parameter  in  the  system  is  defined  as  a/,  whieh  is  the  eoeffieient  in  the  Taylor-series.  This 
speeifie  parameter  value  was  initially  based  of  observations  of  an  aetual  nonlinear  response,  with 
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additional  values  determined  to  elieit  a  speeifie  response.  The  first  four  models  have  the 
parameters  found  in  table  3,  while  the  fifth  represents  the  noise  only  ease.  Sample  responses  for 
eaeh  model  ean  be  found  in  figure  5. 

Table  2.  Gaussian  chirp  signal  parameters. 


Table  3.  Parameters  used  in  each  circuit  model  for  the  Gaussian  chirp  simulations. 


sue  lUIJ  fX:f  2D0V 

r-i^iHicr  ;m'1£| 


(a)  -  Filter  Present  (Cireuit  1) 


-4« 


>p!« 


D  sue 


■SC?  3D0U 


r-'I^LHICY  ikl'l£| 


(c)  -  Filter  Present  (Circuit  3) 


ii$  SI 


i  >T 


Di  SOU  KOU  IStU  ^>DC 

(b)  -  Harmonic  Distortion  Present 
(Circuit  2) 
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Figure  5.  Sample  power  spectrums  of  the  return  signal  from  each  model. 

After  the  refleeted  signal  is  eaptured,  white  Gaussian  noise,  defined  as  (t)  -  N{0,al ) ,  is  added 
to  the  response,  where  i  g  {1,...5}  identifies  the  noise  level  in  terms  of  the  signal-to-noise  ratio 
(SNR)  refereneed  to  the  power  of  the  input  signal.  The  five  added  noise  levels  with  respeet  to 
SNR  are  defined  as  {-3.5137,  -2.9580,  -2.7889,  -2.3987,  and  -1.8417  dB}  and  are  tested  with 
eaeh  eireuit  model.  In  addition,  we  also  test  the  noiseless  response.  This  noise  is  added  to 
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simulate  system  noise  that  represents  possible  variations  between  filters.  Features  are  extraeted 
from  the  power  speetra  of  r(t)  to  ereate  feature  veetors.  Eaeh  speetrum  is  sampled  34  times  at 
regular  intervals  aeross  a  sampling  range  of  200-1900  MHz.  The  resultant  feature  veetors  are 
used  to  form  training  and  testing  sets  of  data  for  the  elassifiers.  In  previous  experimentation,  the 
training  and  testing  data  were  input  into  six  types  of  elassifiers  to  determine  elassifieation 
aeeuraey.  These  inelude  Support  Veetor  Maehines  (SVM),  K-Nearest  Neighbors  (K-NN),  Parzen 
Window  (PW),  Binary  Tree  (BT),  and  two  types  of  Bayesian  (BC)  elassifiers.  The  result  showed 
that  elassifieation  errors  oeeur  for  features  sampled  from  a  power  speetrum  with  a  low  SNR.  The 
SVM,  BT,  PW,  and  K-NN  elassifiers  had  near  perfeet  elassifieation  aeeuraeies.  In  this  report,  we 
expand  upon  this  researeh  by  developing  a  method  for  a  more  robust  approaeh  for  seleeting  the 
parameters  of  the  nonlinear  models.  Our  approaeh  for  seleeting  the  parameters  is  based  on  using 
the  Shoekley  diode  model. 

3.1  Shockley  Diode  Model 

The  parameters  of  the  nonlinear  model  (e.g.,  ehosen  based  on  the  Shoekley 

ideal  diode  equation.  This  equation  states 

/  =  /,-(exp(^)-l)  (8) 

ki 


where 

•  /  =  eurrent  through  diode 

•  Is  =  reverse  saturation  eurrent 

•  e  =  eleetron  eharge  1.602E-19  eoulombs 

•  V=  applied  voltage 

•  K=  Boltzmann’s  eonstant  1 .389E-23 

•  T=  temperature  in  degrees  Kelvin  at  72  °F  (295  K) 

We  used  this  equation  to  generate  eurrent  versus  applied  voltage  (I-V)  eurves,  where  the  features 
of  the  eurves  eharaeterized  linear  and  nonlinear  attributes  of  a  diode  for  the  seleeted  parameters. 
The  Shoekley  ideal  diode  equation  is  derived  with  the  assumption  that  the  only  proeesses  giving 
rise  to  eurrent  in  the  diode  are  drift  due  to  eleetrieal  field,  diffusion,  and  thermal  reeombination- 
generation  (R-G).  It  also  assumes  that  the  R-G  eurrent  in  the  depletion  region  is  insignifieant. 
This  means  that  the  Shoekley  equation  does  not  aeeount  for  the  proeesses  involved  in  reverse 
breakdown  and  photon-assisted  R-G.  Additionally,  it  does  not  deseribe  the  “leveling  off’  of  the 
I-V  eurve  at  high  forward  bias  due  to  internal  resistanee.  Using  this  model,  we  repeated 
Experiment  1,  replaeing  the  original  nonlinearity  parameter  values  with  ones  ealeulated  using  the 
Shoekley  method. 
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3.2  Experiment 


For  our  experiment,  we  looked  at  all  possible  eombinations  of  the  filter,  nonlinearity,  and  noise 
levels.  This  ineluded  all  possible  permutations  of  the  following: 

•  5  nonlinearities 

o  4  diode-based  nonlinearities 
o  No  nonlinearity  present  ease 

•  3  filters 

o  2  filters  from  table  3 
o  No  filter  present  ease 

•  6  noise  values  with  500  variations  of  eaeh 

o  5  noise  power  values,  as  defined  in  seetion  3 
o  No  noise  present  ease 

These  eomponents  were  arranged  in  a  way  similar  to  that  found  in  figure  4,  and  exeited  by  a 
probe  defined  by  equation  7  with  the  parameters  found  in  table  2.  These  experimental  parameters 
were  identieal  to  those  found  in  table  3  with  the  exeeption  of  the  nonlinearity  parameters.  For 
these  parameters,  we  use  the  Shoekley  model  deseribed  in  seetion  3.1.  Our  input  applied  voltage 
(V)  ranged  from  0  to  1  V  with  steps  in  0.01  V  inerements.  The  reverse  saturation  eurrent  (4)  was 
soureed  from  an  Hewlett-Paekard  (HP)  diode  spees.  Four  of  these  parameters  were  used  and  are 
shown  in  table  4. 


Table  4.  Shockley  diode  parameters. 


Diode 

Source 

h 

(amps) 

dl 

HP 

1  X  10'" 

d2 

HP  HSCH-3171 

7x  lO'" 

d3 

HP  HSCH3486 

6x  lO'" 

d4 

Common  value 

1  X  lO  '" 

Using  the  Shoekley  diode  parameters  and  the  applied  voltage  range  results  in  the  eurves  shown 
in  figure  6.  The  MATLAB  funetion  Polyfit  was  used  to  generate  a  set  of  eoeffieients  that  are  then 
used  for  the  Taylor-series  representation  of  the  nonlinearity.  When  exeited  by  the  Gaussian 
windowed  ehirp  signal  deseribed  in  seetion  3,  the  speetrum  response  was  similar  to  that  found  in 
figure  5b  and  5d.  A  sample  of  this  response  is  shown  in  figure  7. 
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Figure  6.  Diode  response  curves. 


Frequency  (GHz) 


Figure  7.  Power  spectral  density  (PSD)  of  nonlinear  model.  Nonlinear  model  uses  coefficients 
estimated  from  the  diode  response  curves. 
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The  diode  response,  as  seen  in  figure  6,  is  almost  identieal  between  different  values  for  4.  The 
major  differenee  here  is  in  the  amplitude  of  the  response.  The  experiment  generated  a  total  of 
45,000  responses,  whieh  ineluded  variations  of  7  basie  system  responses: 

•  Nonlinearity  +  Filter  +  Noise  (20,000  responses) 

•  Nonlinearity  +  Filter  (4,000  responses) 

•  Nonlinearity  +  Noise  (10,000  responses) 

•  Filter  +  Noise  (5,000  responses) 

•  Filter  only  (1 ,000  responses) 

•  Nonlinearity  only  (2,000  responses) 

•  Noise  only  (2,500  responses) 

•  No  noise  +  No  filter  +  No  nonlinearity  (500  responses) 

The  variations  differed  based  on  the  possible  eombinations  of  the  input  parameters  to  generate 
the  eombined  45,000  responses.  From  this  system,  we  ereated  three  feature  superset  groups  for 
analysis,  whieh  ineluded  the  filter  only,  diode  only,  and  filter  +  diode  groups.  Eaeh  elass  in  the 
super  set  was  based  on  the  group  delimiter,  regardless  whether  or  not  another  eomponent  was 
present.  For  example,  the  elass  for  filter  1  in  the  filter  only  group  ineluded  all  responses  where 
filter  1  was  present.  Similarly  in  the  diode  only  ease,  eaeh  elass  eontained  a  group  of  responses 
in  whieh  the  partieular  diode  was  present.  In  the  diode  +  filter  ease,  eaeh  elass  eontained  the  set 
of  responses  in  whieh  a  partieular  filter/diode  pair  was  present. 

Speeifieally  the  filter  1  elass  eontained  responses  from  the  following: 

•  Nonlinearity  +  Filter  1  +  Noise  (10,000  responses) 

•  Nonlinearity  +  Filter  1  (2,000  responses) 

•  Filter  1  +  Noise  (2,500  responses) 

•  Filter  1  only  (500  responses) 

•  Nonlinearity  only  (2,000  responses) 

Feature  veetors  were  obtained  by  determining  the  power  speetrum  of  eaeh  response  and 
uniformly  taking  34  samples  from  eaeh  response.  For  this  analysis,  we  used  the  SVM  (7)  for  our 
elassifieation  algorithm.  This  elassifier  is  used  due  to  its  near  perfeet  elassifieation  performanee 
when  eompared  to  other  elassifiers  (5).  Eaeh  feature  superset  group  was  further  broken  down  by 
noise  power  level.  This  was  done  to  illustrate  the  affeet  of  noise  on  elassifier  performanee.  The 
resulting  elassifieation  aeeuraeies  generated  by  the  SVM  are  shown  in  table  5  and  figure  8. 
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Table  5.  Resulting  classification  accuracies  determined  by  the  SVM  for  Experiment  1. 


SNR 

(dBm) 

Filter 

Filter  +  Diode 

Diode 

Noise  Power  level 

0 

92.88% 

44.85% 

54.19% 

0 

-3.5137 

91.04% 

38.77% 

45.73% 

S.OOx  10 

-2.9580 

93.41% 

49.98% 

52.91% 

S.OOx  10 

-2.7889 

92.21% 

32.24% 

53.49% 

l.OOx  10 

-2.3987 

87.31% 

32.24% 

45.07% 

S.OOx  10 

-1.8417 

86.75% 

25.23% 

45.07% 

5.00  X  10“"' 

Figure  8.  Plot  of  results. 

From  the  results  we  ean  see  that  the  filter  appears  to  be  the  dominant  feature.  Note  that  the 
noiseless  system  did  not  produee  a  100%  elassifieation  aeeuraey,  whieh  was  eaused  when  the 
features  extraeted  were  sealed  before  being  used  by  the  elassifiers  sinee  the  pattern  of  the  power 
speetrum  of  the  nonlinearities  was  identieal.  This  result  warrants  further  investigation  of  the 
unsealed  features.  In  addition,  figure  8  illustrates  that  our  elassifieation  aeeuraey  did  not 
monotonieally  deerease  as  the  SNR  deereased.  This  may  be  due  to  sealing  effeets  introdueed  in 
the  elassifier  or  to  other  proeesses  inherent  in  the  model  and  ealls  for  further  investigation. 
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4.  Experiment  2 


The  original  experiment  eondueted  by  Purdue  University  and  NCSU  studied  the  refleeted  signal 
of  a  filter  exeited  by  a  linear  ehip  probe.  This  response  was  measured  from  a  physieal  filter  and 
noise  was  added  using  MATLAB.  The  initial  goal  was  to  eapture  a  wideband  refleeted  response 
of  the  filter  (8).  The  speetrum  analyzed  allowed  for  only  a  100  MHz  wide  measurement  of  the 
refleeted  response.  To  overeome  this  limitation  the  data  were  mapped  to  a  synthetieally 
generated  larger  response. 

4.1  Probe  Signal 

The  probe  signal  we  used  in  this  study  was  a  baek-to-baek  ehirp,  whieh  was  the  same  as  defined 
in  seetion  2.1;  however,  the  instantaneous  frequeney  was  defined  as 


A,  _  /  27r/o  +  27rA't,  0<t<  Tj,/2 

■  ^  “  1  27r/i  +  27rK  {T^/2  -  t) ,  T^/2<t<T  ^  ^9 

Here  Tp  is  the  length  of  the  signal  in  seeonds  and  K  is  the  ehirp  rate  in  MHz/s.  This  ehirp  sweeps 
from  fo  to  fi  and  baek  to  fo.  This  type  of  ehirp  was  ehosen  to  allow  estimation  of  the  eenter 
frequeney  of  the  exeited  filter  using  only  simple  time  domain  features. 


4.2  Device  Model 

Typical  RF  devices  contain  a  “front-end”  circuit  similar  to  that  shown  in  figure  9,  where  the 
“front-end”  is  the  circuitry  between  the  antenna  and  the  intermediate  frequency  (IF)  section  of 
the  circuit.  The  probe  signal  is  received  by  an  antenna,  passes  through  a  bandpass  filter,  and  is 
input  into  an  amplifier. 


Figure  9.  Block  diagram  of  a  typical  RF  front-end. 

Typically,  these  three  components  are  impedance  matched,  which  allows  us  to  simplify  the  front- 
end  to  the  model,  as  shown  in  figure  10,  where  the  only  component  of  interest  is  the  bandpass 
filter. 
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Figure  10.  Simplified  RF  front-end. 


This  work  focused  on  the  filter  modeled  in  figure  10.  Specifically,  these  filters  differed  enough 
between  devices  that  characterization  of  the  filter  itself  provided  enough  information  to 
characterize  the  device.  The  simplified  front-end  replaced  the  antenna  with  the  signal  source 
2p(t)  in  series  with  Rp,  which  was  matched  to  the  filter  impedance.  The  node  voltage  between 
the  filter  and  Rp  was  the  sum  of  the  signal  p(t)  and  the  reflected  response  r(t).  Similarly  the  filter 
was  terminated  with  resistance  R^,  which  was  also  matched  to  the  filter  impedance.  T(t)  is  the 
transmitted  response  of  the  filter;  this  signal  was  of  no  interest  to  us  in  the  scope  of  this  report. 

4.3  Reflected  Response 

The  filters  to  be  characterized  (i.e.,  those  in  typical  RF  devices)  were  assumed  to  be  linear,  time 
invariant,  and  bandpass  with  passbands  within  the  frequency  range  of  the  probe  signal,  between 
fo  and  fi.  Furthermore,  since  we  were  considering  the  filter  response  only,  we  modeled  the  input 
to  the  device  as  a  filter  with  a  matched  load  as  shown  in  figure  10.  When  the  probe  signal  excites 
the  filter,  a  portion  of  the  probe  is  reflected  back  from  the  filter  and  is  called  the  reflected 
response.  An  example  of  this  response  is  shown  in  figure  11. 

1 - ^ ^ ^ ^ ^ ^ - 


0.8 


-0.8  - ^ ^ ^ ^ ^ ^ - 

0  2  4  6  S  10  12  14 

Time  [  ^s) 


Figure  11.  Example  reflected  filter  response  of  a  back-to-back  linear  chirp  probe  signal. 


14 


4.4  Feature  Selection 

Several  features  were  seleeted  from  the  response.  These  features  ineluded  the  eenter  frequeney, 
bandwidth,  and  sampled  passband  of  the  exeited  filter.  The  “dips”  in  the  response,  seen  in  figure 
1 1  and  with  more  details  in  figure  12,  were  loeated  in  the  passband  of  the  filter,  where  the 
majority  of  the  exeitation  signal  passes  through  the  filter,  and  did  not  eontribute  to  the  refleeted 
response.  Features  were  estimated  from  the  envelope  of  the  passband  signal.  To  obtain  the 
envelope  of  the  refleeted  signal,  it  was  passed  through  a  square  law  deviee  and  low  pass  filter. 
Then,  36  features  were  obtained  from  this  envelope.  First,  the  eenter  frequeney  of  the  filter  was 
estimated  from  the  envelope;  ep,n[k]  is  found  by  estimating  the  sample  indiees  eorresponding  to 
the  eutoff  frequeneies  of  the  passband,  whieh  in  turn  allows  the  bandwidth  to  be  estimated.  The 
remaining  34  features  were  sampled  from  the  passband  of  the  filter.  An  example  of  this  is  shown 
in  figure  12. 


Figure  12.  Sampling  the  filter  reflected  response. 

4.5  NCSU  Experimental  Set  up 

The  original  NCSU  experiment  used  a  probe  signal  that  had  fo  =  100  MHz,/;  =  1000  MHz, 

K=  120x10^  MHz/s,  and /,  =  2.5  ps,  as  defined  in  equation  1,  and  had  a  bandwidth  of  900  MHz. 
This  range  was  ehosen  beeause  it  ineluded  the  passband  of  the  all  filters  that  were  used  for  the 
experiment.  The  signal  generator,  however,  was  limited  to  a  maximum  bandwidth  of  100  MHz. 
We  eireumvented  this  problem  by  redefining  the  probe  signal  to  eonsider  only  the  frequeneies  in 
or  near  the  passband  of  the  filter.  This  is  known  as  the  segmented  probe.  Using  this  assumption, 
we  exeited  the  filter  with  the  segmented  probe  signal  eorresponding  to  the  passband  of  that 
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particular  filter  to  generate  a  partial  reflected  response.  The  partial  response  was  then  mapped  to 
a  full  response  and  the  gaps  were  filled  with  what  the  ideal  response  would  have  looked  like 
outside  the  filter  passband.  The  filter  parameters  were  defined  as  follows: 

•  Filter  1 :  h(l)  fc  =  900  MHz,  fbw  =  27  MHz,  order=7 

•  Filter  2:  h(2)  fc  =  900  MHz,  fbw  =  36  MHz,  order=7 

•  Filter  3:  h(3)  fc  =  900  MHz,  fbw  =  45  MHz,  order=7 

•  Filter  4:  h(4)  fc  =  500  MHz,  fbw  =  25  MHz,  order=5 

•  Filter  5:  h(5)  fc  =  465  MHz,  fbw  =  5  MHz,  order=unknown 

•  Filter  6:  h(6)  fc  ==  465  MHz,  fbw  =  5  MHz,  order=unknown 

The  segmented  probe  signal  used  was 
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(11) 


and  the  chirp  rate  was  if  =  120 x  10^  MHz/s  (the  same  as  the  original  probe),  with  i  denoting  the 
filter  number.  The  probe  signal  was  input  into  the  filter  via  a  circulator  and  the  reflected  response 
was  measured.  A  representation  of  this  measurement  system  is  shown  in  figure  13.  This  reflected 
response  (figure  14)  signal  was  then  mapped  into  a  synthetic  reflected  response  based  on  the 
original  900-MHz  probe  (figure  15). 


Figure  13.  Experimental  measurement  system. 
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Noise  was  added  to  the  refleeted  response  based  on  a  target  SNR.  Onee  the  target  SNR  was 
ehosen,  the  noise  power  was  determined  relative  to  the  power  of  the  exeitation  probe  signal. 
Features  were  extraeted  from  the  noise  version  of  the  response,  grouped  by  SNR,  and  elassified 
using  a  SVM  elassifier.  The  results  from  this  elassifieation  are  shown  in  figure  16. 
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Figure  16.  Result  from  SVM  classifier  segmented  by  SNR. 

These  results  show  that  by  using  a  relative  small  feature  set  we  were  able  to  obtain  high 
elassifieation  aeeuraey  at  moderate  SNRs.  However,  these  results  may  have  an  inherent  error  due 
to  the  mapping  and  they  do  not  aeeount  for  the  effeet  of  a  nonlinearity  in  the  system.  To  address 
these  issues,  we  measured  the  refleeted  response  over  a  wide  bandwidth  with  a  nonlinearity 
present. 

4.6  Experimental  Set  up 

Given  the  limitations  presented  by  the  hardware  available  at  NCSU,  we  wanted  to  remove  the 
need  for  mapping  the  refleeted  response  by  measuring  the  full  refleeted  response  from  the 
system.  For  this  experiment,  we  used  a  probe  signal  that  had  an  initial  starting  frequeney, 

/o  =  100  MHz;  an  end  frequeney,/;  =  3100  MHz;  and  T  =0.25  ps.  This  probe  eonsisted  of  an  up- 
ehirp  with  instantaneous  frequeney: 


(p{t)  =  27r/o  +  2iTkt 


(12) 
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We  used  the  following  filters  in  the  experiments: 

•  Center  Frequeney:  1200  MHz  -  Band  width:  120  MHz 

•  Center  Frequeney:  1860  MHz  -  Band  width:  800  MHz 

•  Center  Frequeney:  660  MHz  -  Band  width:  800  MHz 

•  Center  Frequeney:  247.5  MHz  -  Band  width:  25  MHz. 

These  filters  were  exeited  by  the  probe  signal  with  and  without  a  pair  of  opposite  diodes  in 
parallel  serving  as  the  nonlinearity  plaeed  between  the  filter  and  the  termination  point.  Only  one 
response  was  measured  for  eaeh  filter-diode  eombination  yielding  eight  measurement,  four  with 
the  diode  present  and  four  without. 

AWGN  was  then  added  to  the  measured  refleeted  signal.  The  noise  power  was  relative  to  the 
probe  signal  to  aehieve  a  target  SNR.  For  this  experiment,  the  target  SNR  (dBm)  values  were 
-60,  -40,  -20,  -10,  0,  10,  20,  40,  and  60.  For  eaeh  measured  response,  500  noisy  versions  were 
ereated  from  eaeh  single  response.  In  a  manner  similar  to  that  used  in  seetion  3.2,  the  responses 
from  the  filter  were  grouped  into  supersets  based  on  filter  only  and  filter  +  diode.  The  filter  only 
ease  ineluded  all  eases  where  a  filter  was  present.  For  example,  the  filter  1  elass  ineluded  both 
the  eases  where  the  nonlinearity  was  and  was  not  present  and  thus  yielded  1,000  noisy  responses. 
The  filter  +  diode  ease  treated  eaeh  type  of  response  as  a  different  elass  and  resulted  in  500  noisy 
responses  in  eaeh  elass. 

By  adding  noise,  we  ean  build  a  test  and  training  set  for  the  SVM  elassifier.  From  eaeh  member 
of  the  training  and  testing  sets,  features  were  extraeted  in  the  manner  deseribed  in  seetion  4.4. 
The  features  ineluded  eenter  frequeney,  bandwidth,  and  a  34-point  sample  of  the  passband  of  the 
filter  yielding  a  36-point  feature  veetor.  An  SVM  elassifier  was  used  for  elassifieation.  The 
results  are  shown  in  table  6. 

Table  6.  Resulting  classification  accuracies  determined  by  the  SVM 
for  Experiment  2. 


SNR 

(dBm) 

Filter  +  Diode 

Filter  Only 

-60 

12.05% 

26.06% 

-40 

99.50% 

100% 

-20 

100% 

100% 

-10 

100% 

100% 

0 

100% 

100% 

10 

100% 

100% 

20 

100% 

100% 

40 

100% 

100% 

60 

100% 

100% 
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Initial  analysis  of  this  data  infers  that  the  mapping  proeess  shifts  the  elassifieation  eurve  to  the 
right,  aehieving  eomparable  elassifieation  results  when  SNR  levels  are  redueed  by  40-60  dB. 


5.  Future  Work 


While  the  diode  model  used  provides  a  foundation  for  modeling  nonlinearities,  it  still  warrants 
further  investigation.  We  notieed  that  the  amplitude  plays  a  major  role  in  the  response  of  the 
nonlinearity;  this  parameter  should  be  looked  at  in  more  detail.  When  eombined  with  a  filter,  it 
would  be  of  interest  to  observe  whether  the  shape  or  the  amplitude  of  the  response  plays  a  more 
signifieant  role  in  elassifieation.  Also,  sinee  the  filter  seems  to  be  the  dominate  feature  in  both 
sets  of  experiments,  a  tiered  elassifieation  system  should  be  explored.  This  type  of  system  would 
elassify  based  on  filter  first,  followed  by  a  diode-based  elassifieation. 
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List  of  Symbols,  Abbreviations,  and  Acronyms 


AWGN 

Additive  White  Gaussian  Noise 

BC 

Bayesian  elassifier 

BT 

Binary  Tree 

FCC 

Federal  Communieations  Commission 

HP 

Hewlett-Paekard 

IF 

intermediate  frequeney 

I-V 

eurrent  versus  applied  voltage 

K-NN 

K-Nearest  Neighbors 

NCSU 

North  Carolina  State  University 

PEDs 

Portable  Eleetronie  Deviees 

PSD 

power  speetral  density 

PW 

Parzen  Window 

R-G 

reeombination-generation 

SNR 

signal-to-noise  ratio 

SVM 

Support  Veetor  Maehines 

T-PEDs 

transmitting  PEDs 

22 


NO.  OF 
COPIES 

1 

ELECT 

1  CD 

1 

1 


1 

1 

1 


ORGANIZATION 


NO.  OF 

COPIES  ORGANIZATION 


ADMNSTR 

DEFNS  TECHL  INFO  CTR 
ATTN  DTIC  OCP 

8725  JOHN  J  KINGMAN  RD  STE  0944 
FT  BEL  VOIR  VA  22060-6218 

DARPA 

ATTN  IXO  S  WELBY 
3701  N  FAIRFAX  DR 
ARLINGTON  VA  22203-1714 

OFC  OF  THE  SECY  OF  DEFNS 
ATTN  ODDRE(R&AT) 

THE  PENTAGON 
WASHINGTON  DC  20301-3080 

US  ARMY  RSRCH  DEV  AND  ENGRG 
CMND 

ARMAMENT  RSRCH  DEV  AND 
ENGRG  CTR 

ARMAMENT  ENGRG  AND 
TECHNLGY  CTR 

ATTN  AMSRDAARAEFT  J  MATTS 
BLDG  305 

ABERDEEN  PROVING  GROUND 
MD  21005-5001 

PM  TIMS,  PROFILER  (MMS-P) 
AN/TMQ-52 
ATTN  B  GRIFFIES 
BUILDING  563 
FT  MONMOUTH  NJ  07703 


1  PURDUE  UNIV 

SCHOOL  OF  ELEC  AND  COMPUTER 
ENGRG  ELEC  ENGRG  BLDG 
ATTN  D  KING-SMITH 
465  NORTHWESTERN  AVE 
WEST  LAFAYETTE  IN  47907-2035 

1  US  ARMY  RSRCH  LAB 

ATTN  RDRL  CIM  G  T  LANDFRIED 
BLDG  4600 

ABERDEEN  PROVING  GROUND  MD 
21005-5066 


21 


US  ARMY  RSRCH  LAB 
ATTN  IMNE  ALC  HRR  MAIL  & 
RECORDS  MGMT 
ATTN  RDRL  CIM  L  TECHL  LIB 
ATTN  RDRL  CIM  P  TECHL  PUB 
ATTN  RDRLSERU  A  MARTONE 
(10  COPIES) 

ATTN  RDRLSERU  A  SULLIVAN 
ATTN  RDRLSERU  F  KOENIG 
ATTN  RDRLSERU  J  COSTANZA 
ATTN  RDRLSERU  K  KAPPRA 
ATTN  RDRLSERU  K  RANNEY 
ATTN  RDRLSERU  K  SHERBONDY 
ATTN  RDRLSERU  L  NGUYEN 
ATTN  RDRLSERU  M  RESSLER 
ADELPHI  MD  20783-1 197 


TOTAL:  31  (29  HCS,  1  CD,  1  ELECT) 


US  ARMY  INFO  SYS  ENGRG  CMND 
ATTN  AMSEL  IE  TD  A  RIVERA 
FT  HUACHUCA  AZ  85613-5300 


COMMANDER 
US  ARMY  RDECOM 
ATTN  AMSRD  AMR 
WC  MCCORKLE 
5400  FOWLER  RD 

REDSTONE  ARSENAL  AL  35898-5000 


US  GOVERNMENT  PRINT  OFF 
DEPOSITORY  RECEIVING  SECTION 
ATTN  MAIL  STOP  ID  AD  J  TATE 
732  NORTH  CAPITOL  ST  NW 
WASHINGTON  DC  20402 
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Intentionally  Left  Blank. 
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